. [ 81.613670][ T31] audit: type=1800 audit(1567000936.658:25): pid=11589 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="cron" dev="sda1" ino=2414 res=0 [ 81.637544][ T31] audit: type=1800 audit(1567000936.688:26): pid=11589 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2457 res=0 [ 81.674896][ T31] audit: type=1800 audit(1567000936.708:27): pid=11589 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.125' (ECDSA) to the list of known hosts. 2019/08/28 14:02:28 fuzzer started 2019/08/28 14:02:34 dialing manager at 10.128.0.26:41787 2019/08/28 14:02:34 syscalls: 2376 2019/08/28 14:02:34 code coverage: enabled 2019/08/28 14:02:34 comparison tracing: CONFIG_KCOV_ENABLE_COMPARISONS is not enabled 2019/08/28 14:02:34 extra coverage: enabled 2019/08/28 14:02:34 setuid sandbox: enabled 2019/08/28 14:02:34 namespace sandbox: enabled 2019/08/28 14:02:34 Android sandbox: /sys/fs/selinux/policy does not exist 2019/08/28 14:02:34 fault injection: enabled 2019/08/28 14:02:34 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2019/08/28 14:02:34 net packet injection: enabled 2019/08/28 14:02:34 net device setup: enabled 14:05:13 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lstat(0x0, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_CAPACITY(r0, 0x125f) syzkaller login: [ 258.271069][T11754] IPVS: ftp: loaded support on port[0] = 21 [ 258.414657][T11754] chnl_net:caif_netlink_parms(): no params data found [ 258.472425][T11754] bridge0: port 1(bridge_slave_0) entered blocking state [ 258.479916][T11754] bridge0: port 1(bridge_slave_0) entered disabled state [ 258.489201][T11754] device bridge_slave_0 entered promiscuous mode [ 258.499799][T11754] bridge0: port 2(bridge_slave_1) entered blocking state [ 258.507207][T11754] bridge0: port 2(bridge_slave_1) entered disabled state [ 258.516309][T11754] device bridge_slave_1 entered promiscuous mode [ 258.548788][T11754] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 258.561663][T11754] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 258.594698][T11754] team0: Port device team_slave_0 added [ 258.604116][T11754] team0: Port device team_slave_1 added [ 258.739202][T11754] device hsr_slave_0 entered promiscuous mode [ 259.075193][T11754] device hsr_slave_1 entered promiscuous mode [ 259.336026][T11754] bridge0: port 2(bridge_slave_1) entered blocking state [ 259.343646][T11754] bridge0: port 2(bridge_slave_1) entered forwarding state [ 259.351865][T11754] bridge0: port 1(bridge_slave_0) entered blocking state [ 259.359265][T11754] bridge0: port 1(bridge_slave_0) entered forwarding state [ 259.442944][T11754] 8021q: adding VLAN 0 to HW filter on device bond0 [ 259.456643][ T5] bridge0: port 1(bridge_slave_0) entered disabled state [ 259.475233][ T5] bridge0: port 2(bridge_slave_1) entered disabled state [ 259.498919][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 259.524016][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 259.533094][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 259.547479][T11754] 8021q: adding VLAN 0 to HW filter on device team0 [ 259.567679][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 259.577348][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 259.586404][ T30] bridge0: port 1(bridge_slave_0) entered blocking state [ 259.593801][ T30] bridge0: port 1(bridge_slave_0) entered forwarding state [ 259.603132][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 259.613138][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 259.622222][ T30] bridge0: port 2(bridge_slave_1) entered blocking state [ 259.630094][ T30] bridge0: port 2(bridge_slave_1) entered forwarding state [ 259.645860][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 259.668002][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 259.678649][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 259.689803][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 259.718203][T11754] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 259.729172][T11754] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 259.743156][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 259.752545][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 259.763122][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 259.772834][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 259.782160][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 259.791930][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 259.801401][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 259.813007][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 259.851392][T11754] 8021q: adding VLAN 0 to HW filter on device batadv0 14:05:15 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_CAPACITY(r0, 0x12fb) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) 14:05:15 executing program 0: openat$ptmx(0xffffffffffffff9c, &(0x7f0000001940)='/dev/ptmx\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ASSIGN_SET_MSIX_NR(0xffffffffffffffff, 0x4008ae73, &(0x7f0000000000)={0x5}) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000180)={0x0, 0x0, @ioapic={0x4000}}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) prctl$PR_SET_MM_MAP_SIZE(0x23, 0xf, &(0x7f00000000c0)) ioctl$KVM_SET_TSS_ADDR(r1, 0xae47, 0xd000) getsockopt$IP6T_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x29, 0x45, &(0x7f0000000080)={'NETMAP\x00'}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000300)={{}, {}, {0x0, 0x0, 0x0, 0x8b, 0x100000001, 0x0, 0x0, 0x0, 0x0, 0x10001}, {}, {}, {}, {}, {}, {}, {}, 0xfffffffffffffffa}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 260.145155][T11768] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 260.188099][T11768] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. 14:05:15 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0) r1 = creat(&(0x7f0000000140)='./file0\x00', 0x0) write$P9_RCLUNK(r0, &(0x7f0000000000)={0x1e8}, 0xb5) fallocate(r1, 0x0, 0x0, 0x2000402) fallocate(r0, 0x100000000, 0x65e, 0x10000) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0x0, r1, 0x0, 0x8}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r1, 0x6612) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) 14:05:16 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0xa, 0x1, 0x0) rt_sigaction(0x3f, &(0x7f00000000c0)={&(0x7f0000000040)="0f01ee26400f01d943c1a50b0000001167400f38f660670f0dac98730000002e450f61c6640f0f2ce6b06566460f2ea456da0000002e0f1c38c4017be67415d0", {0x101}, 0x40000000, &(0x7f0000000080)="8fa988027200c443956ad403c4617d104806440f0dd747d1d766400ff59d10cb158cc401f95b24f1c443897c67f1908f29e8927b74c4428af55dae"}, &(0x7f00000001c0)={&(0x7f0000000100)="c4837905f9a8c4634d7ed204c462e0f31226f20f79fc844f00660fe8b2b4c94c4c3405f08027cd46f6382ef7ee", {}, 0x0, &(0x7f0000000140)="660f3a422b00f30f0168b066440fe430c4817fe60136410f6ba48a000001008f683087a5000001003a6536660f57ac65008000008f6a781011060000008fe9f812c9400f0d09"}, 0x8, &(0x7f0000000200)) setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, &(0x7f0000000000)={0x0, 'nr0\x8d\x00', 0x2}, 0x18) ioctl(r1, 0x8916, &(0x7f0000000000)) setsockopt$inet_tcp_int(r0, 0x6, 0x10, &(0x7f0000000240)=0x2, 0x4) 14:05:16 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() r2 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="d3d6bf3c38f19c040acd8045"], 0xc}}, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYRESHEX, @ANYPTR64, @ANYBLOB="11c4cc8bdfc91f95c514cd7d1ee174e6687514fc4ad6579a92a7132fd92fc80b17bd1e8997e9319846bcdffe36f3ad753aafc6bdb3de00b213c62297d219883d681d67803079924310090144704eddfc1bb8443ad3d2ca7fbb8c2011a4aeae9873ad2e4db3a6444251545e1dbf8c0b9527aa88bafa552157df2d682439f8a25e9d89d3cad0de4eebcdd5f18b3a46f3de74954eff16ea5580a64a233654dea1a3d39b6a29292591fb281f146334ebf8f81a0aed9d323ad2aabba7df2bb02c92c0018d2a47a6c94a90bd0440", @ANYBLOB="e6c55c669eb82eec5101e632ff0000000000000004227280437a74620100000000000000ca44f937d0492400ba837296d961244e2e0c734057548c402cc43b3897cc275fd87f335dc73efdc40db65c87e94021dfdaf3d0fef515586ddfbb1118"], 0x0, 0x145}, 0x20) tkill(r2, 0x3b) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) 14:05:16 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x1, 0xa, 0x3d, 0x8000000001, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x4000}, 0x3c) bpf$MAP_CREATE(0x2, &(0x7f0000003000)={0x3, 0x0, 0x400000077fffb, 0x0, 0x820000, 0x0}, 0x2c) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000000)={r0, &(0x7f00000000c0)}, 0x10) [ 261.344145][T11782] ptrace attach of "/root/syz-executor.0"[11781] was attempted by "/root/syz-executor.0"[11782] 14:05:16 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000001080)='/dev/dri/card#\x00', 0x1, 0x2) modify_ldt$read(0x0, &(0x7f0000000000)=""/91, 0x5b) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x14051, r0, 0x0) openat$capi20(0xffffffffffffff9c, &(0x7f0000000080)='/dev/capi20\x00', 0x40000, 0x0) r1 = syz_open_dev$sndpcmc(&(0x7f00000000c0)='/dev/snd/pcmC#D#c\x00', 0x4, 0x400000) ioctl$RTC_ALM_READ(r1, 0x80247008, &(0x7f0000000100)) 14:05:16 executing program 1: ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=0x0) sched_setscheduler(r0, 0x6, &(0x7f0000000040)=0x1f) ioprio_get$pid(0x2, r0) r1 = socket$l2tp(0x18, 0x1, 0x1) ioctl$sock_SIOCGSKNS(r1, 0x894c, &(0x7f0000000080)=0xab) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) ioctl$KVM_SET_FPU(r3, 0x41a0ae8d, &(0x7f0000000100)={[], 0x81, 0x800, 0x87, 0x0, 0x1ff, 0x2000, 0x1, [], 0x1}) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f00000002c0)={0x9, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000300)=0x28) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r4, 0x84, 0x79, &(0x7f0000000340)={r6, 0xec, 0x100000001}, 0x8) getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f0000000380)={{{@in=@multicast2, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in6=@loopback}}, &(0x7f0000000480)=0xe8) getgroups(0x1, &(0x7f00000004c0)=[0xee01]) fchown(r4, r8, r9) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r3, 0x84, 0x23, &(0x7f0000000500)={r7, 0xfffffffffffffff9}, 0x8) getpeername$inet(r4, &(0x7f0000000540)={0x2, 0x0, @dev}, &(0x7f0000000580)=0x10) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r4, 0x84, 0x75, &(0x7f00000005c0)={r5, 0x2}, 0x8) ioctl$NBD_SET_TIMEOUT(r4, 0xab09, 0xffffffffffff8001) ioctl$NBD_SET_BLKSIZE(r3, 0xab01, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r4, 0x4008240b, &(0x7f0000000640)={0xd955fc9acbc284e4, 0x70, 0x400, 0x9, 0xffffffffffffffff, 0x81, 0x0, 0xe8f7, 0x8, 0x0, 0x1021, 0x0, 0xff, 0x2, 0x80, 0x7, 0x200, 0x40, 0x10000, 0x8, 0x5, 0x7fffffff, 0xe62, 0xa425, 0x5, 0x9, 0xf35b, 0x4, 0x6, 0xfffffffffffff11a, 0xfffffffffffffffb, 0xfffffffffffffffd, 0x1, 0x5, 0xc05, 0xffffffffffffffff, 0x2, 0x100000001, 0x0, 0xaf, 0x1, @perf_bp={&(0x7f0000000600), 0x8}, 0x20000, 0xa62, 0xba2b, 0x6, 0x10001, 0x7, 0xff}) setuid(r8) r10 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/hwrng\x00', 0x2000, 0x0) ioctl$PIO_FONTX(r10, 0x4b6c, &(0x7f0000000700)="435ed472ecb88ae37e944b72e6ddb21436f80cf4b6dab38f200ed2fe3a099cc693e2f097b431c8740fac16437aaf95008b564af4bec07d5ebb49983a11544389484ff6b86c1c89fbd3a39f1e151f7ea577932c089cafe069cc787e61fe9009287b1ce396053a6d4bc1dd70ce3a08643ceda2d5850e00467c37d6e70c54d9fe7d25d9e4bae766594dd5e88c0c61e1250cbacd26456d6d743d1af2fb4ce4786c80bf56c6e36521f1c3e0f39c38b5c0c8aee2b4098eef125d0da832b985e54dcff433ea585941747de8708a15c8ba58873e") ioctl$NBD_SET_BLKSIZE(r10, 0xab01, 0x9) fsopen(&(0x7f0000000800)='qnx4\x00', 0x1) fsetxattr$trusted_overlay_redirect(r10, &(0x7f0000000840)='trusted.overlay.redirect\x00', &(0x7f0000000880)='./file0\x00', 0x8, 0x1) ioctl$KIOCSOUND(r3, 0x4b2f, 0x7) setsockopt$SO_TIMESTAMP(r10, 0x1, 0x40, &(0x7f00000008c0)=0x8, 0x4) ioctl$SG_GET_COMMAND_Q(r4, 0x2270, &(0x7f0000000900)) sendto$inet6(r2, &(0x7f0000000940)="575e7caf5513ef023959f1951120118cabf169fa98ffa2bcf8f5788bfce302b4ae5c74d0565505904387047bb048bfa43f51c5de63fbd8e702ccec6d980c6d8ee1e5", 0x42, 0x40c0, 0x0, 0x0) ioctl$INOTIFY_IOC_SETNEXTWD(r4, 0x40044900, 0xff00) 14:05:17 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) close(r0) r3 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x1, 0x0) write$FUSE_IOCTL(r3, &(0x7f00000000c0)={0x20, 0x0, 0x7, {0xfffffffffffffeff, 0x0, 0x3, 0xfffffffffffffea2}}, 0x20) getsockopt$inet6_dccp_buf(r3, 0x21, 0x2, &(0x7f0000000100)=""/255, &(0x7f0000000200)=0xff) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r3, 0x28, 0x2, &(0x7f0000000040)=0xffff, 0x8) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r0, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfffffffffffffdec, 0x0, 0x0, 0x0) [ 262.247791][T11796] IPVS: ftp: loaded support on port[0] = 21 14:05:17 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) close(r0) r3 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x1, 0x0) write$FUSE_IOCTL(r3, &(0x7f00000000c0)={0x20, 0x0, 0x7, {0xfffffffffffffeff, 0x0, 0x3, 0xfffffffffffffea2}}, 0x20) getsockopt$inet6_dccp_buf(r3, 0x21, 0x2, &(0x7f0000000100)=""/255, &(0x7f0000000200)=0xff) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r3, 0x28, 0x2, &(0x7f0000000040)=0xffff, 0x8) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r0, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfffffffffffffdec, 0x0, 0x0, 0x0) [ 262.402546][T11796] chnl_net:caif_netlink_parms(): no params data found [ 262.473601][T11796] bridge0: port 1(bridge_slave_0) entered blocking state [ 262.482718][T11796] bridge0: port 1(bridge_slave_0) entered disabled state [ 262.491850][T11796] device bridge_slave_0 entered promiscuous mode [ 262.527527][T11796] bridge0: port 2(bridge_slave_1) entered blocking state [ 262.535044][T11796] bridge0: port 2(bridge_slave_1) entered disabled state [ 262.544790][T11796] device bridge_slave_1 entered promiscuous mode [ 262.578894][T11796] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 262.593041][T11796] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 262.627030][T11796] team0: Port device team_slave_0 added [ 262.636920][T11796] team0: Port device team_slave_1 added 14:05:17 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0x4a, 0x0, 0xffffffffffffff9c}, 0x2c) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x2, &(0x7f0000000040)={0x40000000003, 0x0, 0x77fffb, 0x0, 0x10020000008, 0x0}, 0x2c) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") close(r0) r2 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000080)='/proc/capi/capi20ncci\x00', 0x2000, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000180)={0xffffffffffffffff}, 0x111, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_DESTROY_ID(r2, &(0x7f0000000200)={0x1, 0x10, 0xfa00, {&(0x7f00000000c0), r3}}, 0x18) [ 262.719221][T11796] device hsr_slave_0 entered promiscuous mode [ 262.746309][T11796] device hsr_slave_1 entered promiscuous mode [ 262.774525][T11796] debugfs: Directory 'hsr0' with parent '/' already present! [ 262.804921][T11796] bridge0: port 2(bridge_slave_1) entered blocking state [ 262.812253][T11796] bridge0: port 2(bridge_slave_1) entered forwarding state [ 262.820315][T11796] bridge0: port 1(bridge_slave_0) entered blocking state [ 262.827655][T11796] bridge0: port 1(bridge_slave_0) entered forwarding state 14:05:17 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x400001000008912, &(0x7f0000000140)="11dca50d5e0bcfe47bf070") r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x181100, 0x0) ioctl$GIO_SCRNMAP(r1, 0x4b40, &(0x7f0000000040)=""/60) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="0206000004000000000000000000000002000100000000000000000000000000b2198253b4167efab40ec934e632e812495ffe282299003289e1a8298431dea47cebb68b04c76943b1f1f86c65d9b7d83169e8c95371ad61edad63138fe4b9631143b40ed39afdce2d3fa10852249e29b492704667a48cf21c6e6e498b2ef0b09bbb70"], 0x20}}, 0x0) [ 262.929852][T11796] 8021q: adding VLAN 0 to HW filter on device bond0 [ 262.975820][ T3358] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 262.988007][ T3358] bridge0: port 1(bridge_slave_0) entered disabled state [ 263.008043][ T3358] bridge0: port 2(bridge_slave_1) entered disabled state [ 263.020691][ T3358] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 263.044040][T11796] 8021q: adding VLAN 0 to HW filter on device team0 [ 263.066259][ T3358] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 263.075357][ T3358] bridge0: port 1(bridge_slave_0) entered blocking state [ 263.082631][ T3358] bridge0: port 1(bridge_slave_0) entered forwarding state [ 263.161558][ T3358] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 263.171116][ T3358] bridge0: port 2(bridge_slave_1) entered blocking state [ 263.178433][ T3358] bridge0: port 2(bridge_slave_1) entered forwarding state [ 263.189300][ T3358] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 263.199724][ T3358] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready 14:05:18 executing program 0: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000440)='/dev/snapshot\x00', 0x408000, 0x0) r1 = syz_open_dev$radio(&(0x7f0000000480)='/dev/radio#\x00', 0x1, 0x2) r2 = syz_open_dev$vcsn(&(0x7f00000004c0)='/dev/vcs#\x00', 0x8, 0x20000) ioctl$KVM_IRQFD(r0, 0x4020ae76, &(0x7f0000000500)={r1, 0x81, 0x1, r2}) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x9, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") r4 = accept(r3, &(0x7f0000000040)=@nl=@proc, &(0x7f0000000180)=0x80) sendto$inet6(r4, &(0x7f00000001c0)="73509ee02977cf9ea3d9ece07409d43406b438cef4caff2e570ad3e3d1a02aa99b33f542dc2f25f3782c263f2de362598c434e3b25f304d2fc", 0x39, 0x40000, &(0x7f0000000200)={0xa, 0x4e21, 0x8, @empty, 0x7}, 0x1c) write$FUSE_NOTIFY_STORE(r2, &(0x7f0000000580)={0x2c, 0x4, 0x0, {0x2, 0x7014, 0x4, 0x0, [0x0, 0x0, 0x0, 0x0]}}, 0x2c) getsockopt$EBT_SO_GET_INIT_ENTRIES(r3, 0x0, 0x83, &(0x7f0000000380)={'nat\x00', 0x0, 0x4, 0xd1, [], 0x2, &(0x7f0000000240)=[{}, {}], &(0x7f0000000280)=""/209}, &(0x7f0000000400)=0x78) unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) syz_open_dev$vbi(&(0x7f0000000540)='/dev/vbi#\x00', 0x0, 0x2) accept$inet6(r4, 0x0, 0x0) openat$selinux_attr(0xffffffffffffff9c, &(0x7f00000005c0)='/proc/self/attr/exec\x00', 0x2, 0x0) ioctl$KVM_ASSIGN_PCI_DEVICE(r1, 0x8040ae69, &(0x7f0000000600)={0x4, 0x10001, 0x80000001, 0x6, 0x10000}) r5 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_INFO(r5, 0x0, 0x40, &(0x7f00000000c0)={'raw\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\xa6^_\x00\x00\x00\x00\x00\xbbN\xec\xff\xcb\xe3\xd2(\x00'}, &(0x7f0000000140)=0x54) [ 263.209905][ T3358] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 263.219359][ T3358] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 263.232935][T11796] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 263.283207][T11817] IPVS: ftp: loaded support on port[0] = 21 [ 263.296828][ T3358] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 263.320477][T11796] 8021q: adding VLAN 0 to HW filter on device batadv0 14:05:18 executing program 1: unshare(0x8020800) socket(0x40000000015, 0x400000005, 0x0) r0 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0x80, 0x0) ioctl$EVIOCSABS3F(r0, 0x401845ff, &(0x7f0000000100)={0x8, 0x1, 0x86a, 0x80000001, 0x9, 0x5}) r1 = open(&(0x7f0000000040)='./file0\x00', 0x200, 0x120) ioctl$VT_OPENQRY(r1, 0x5600, &(0x7f0000000080)) ioctl$VT_RELDISP(r1, 0x5605) r2 = socket$inet6(0xa, 0x1, 0x0) eventfd(0x1000) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0xffffffffffffffff, @empty={[0x1800000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x240]}}, 0x1c) 14:05:18 executing program 1: unshare(0x2000400) r0 = memfd_create(&(0x7f0000000100)='\x88])+\x00', 0x1) write(r0, &(0x7f0000000080)=')', 0x1) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x11, r0, 0x0) ftruncate(r0, 0xa00002) sendfile(r0, r0, &(0x7f0000000040), 0xff8) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$netlink(r1, 0x10e, 0x3, 0x0, &(0x7f0000000180)=0x1777d0606b188202) r2 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x81, 0x80000) ioctl$HIDIOCGREPORTINFO(r2, 0xc00c4809, &(0x7f00000000c0)={0x2, 0x1, 0x4}) 14:05:18 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001100)='/dev/kvm\x00', 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, &(0x7f0000000180)=0x1, 0xfffffffffffffdf4) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)=ANY=[@ANYBLOB="14bc420000000056b500f1ff00080000000008000800010000009da5c9bfee971c4a72daa86b694eed7e080205cffa14341b08000800050f01"], 0x1}}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f00000002c0)="b8010000000f01c166b8e2000f00d8b9800000c00f3235004000000f304a0fc75f20c44379608d00000100f22e0f01ca67440ff6143f66ba4000b846c95182ef0f01cf400f01df", 0x47}], 0xaaaaaaaaaaaace6, 0x0, 0x0, 0xeb) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000010000/0x1000)=nil}) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, &(0x7f0000000000)={0xffffffffffffc14e, 0x0, 0x6, 0x3c6}) r3 = syz_open_dev$sndpcmp(&(0x7f0000000080)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x83, &(0x7f00000004c0)={'nat\x00', 0x0, 0x0, 0x0, [], 0x0, 0x0, 0x0}, &(0x7f00000000c0)=0x78) write$P9_RLINK(r3, &(0x7f0000000200)={0x7, 0x47, 0x1}, 0x7) ioctl$KVM_RUN(r2, 0xae80, 0x0) setsockopt$inet_sctp_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f00000001c0)={0x10001, 0x100000001, 0x9, 0x7f, 0x100000001, 0x1, 0x3, 0x1ff, 0x4, 0x1, 0x6}, 0xb) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 264.050084][T11818] IPVS: ftp: loaded support on port[0] = 21 14:05:19 executing program 1: pselect6(0x40, &(0x7f0000000040)={0x4, 0x1ff, 0x1, 0x3, 0x1, 0x800, 0x35c9, 0x200}, &(0x7f0000000080)={0x7f, 0x8000000, 0x5, 0x8000, 0x81, 0xffffffffffffffff, 0x9, 0xffffffffffffffff}, &(0x7f0000000100)={0x45, 0x8, 0x3, 0x0, 0x20, 0x101, 0x0, 0x6}, &(0x7f0000000140)={0x77359400}, &(0x7f00000001c0)={&(0x7f0000000180)={0x4}, 0x8}) pselect6(0x5b, &(0x7f00000000c0), 0x0, &(0x7f0000000000), &(0x7f0000000200), 0x0) 14:05:20 executing program 1: unshare(0x20400) syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) r0 = syz_open_dev$mouse(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000040)={&(0x7f0000000000)=[0xe8, 0x8000, 0x200, 0x6, 0x2], 0x5, 0x1, 0x6, 0x81b2, 0x20000, 0x487, {0x6, 0x400, 0x2, 0x4, 0x5937, 0x9ea7, 0xffffffff80000001, 0x0, 0x6, 0x4e0, 0x20, 0x3, 0x362, 0x10000, "caca8ae95bb6085275a84198624ed6986cc5136ddb307bfa7b55a420e980b8a3"}}) ioctl$SG_SCSI_RESET(r0, 0x2284, 0x0) 14:05:20 executing program 1: r0 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0x17, 0xfffffffffffffffe, 0x82) setsockopt$inet_int(r0, 0x0, 0x12, &(0x7f0000000000), 0x4) 14:05:20 executing program 0: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000440)='/dev/snapshot\x00', 0x408000, 0x0) r1 = syz_open_dev$radio(&(0x7f0000000480)='/dev/radio#\x00', 0x1, 0x2) r2 = syz_open_dev$vcsn(&(0x7f00000004c0)='/dev/vcs#\x00', 0x8, 0x20000) ioctl$KVM_IRQFD(r0, 0x4020ae76, &(0x7f0000000500)={r1, 0x81, 0x1, r2}) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x9, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") r4 = accept(r3, &(0x7f0000000040)=@nl=@proc, &(0x7f0000000180)=0x80) sendto$inet6(r4, &(0x7f00000001c0)="73509ee02977cf9ea3d9ece07409d43406b438cef4caff2e570ad3e3d1a02aa99b33f542dc2f25f3782c263f2de362598c434e3b25f304d2fc", 0x39, 0x40000, &(0x7f0000000200)={0xa, 0x4e21, 0x8, @empty, 0x7}, 0x1c) write$FUSE_NOTIFY_STORE(r2, &(0x7f0000000580)={0x2c, 0x4, 0x0, {0x2, 0x7014, 0x4, 0x0, [0x0, 0x0, 0x0, 0x0]}}, 0x2c) getsockopt$EBT_SO_GET_INIT_ENTRIES(r3, 0x0, 0x83, &(0x7f0000000380)={'nat\x00', 0x0, 0x4, 0xd1, [], 0x2, &(0x7f0000000240)=[{}, {}], &(0x7f0000000280)=""/209}, &(0x7f0000000400)=0x78) unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) syz_open_dev$vbi(&(0x7f0000000540)='/dev/vbi#\x00', 0x0, 0x2) accept$inet6(r4, 0x0, 0x0) openat$selinux_attr(0xffffffffffffff9c, &(0x7f00000005c0)='/proc/self/attr/exec\x00', 0x2, 0x0) ioctl$KVM_ASSIGN_PCI_DEVICE(r1, 0x8040ae69, &(0x7f0000000600)={0x4, 0x10001, 0x80000001, 0x6, 0x10000}) r5 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_INFO(r5, 0x0, 0x40, &(0x7f00000000c0)={'raw\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\xa6^_\x00\x00\x00\x00\x00\xbbN\xec\xff\xcb\xe3\xd2(\x00'}, &(0x7f0000000140)=0x54) 14:05:20 executing program 1: setxattr$security_smack_entry(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='security.SMACK64\x00', &(0x7f0000000080)='\x00', 0x1, 0x1) unshare(0x400) r0 = socket$nl_generic(0x10, 0x3, 0x10) fchdir(r0) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm-monitor\x00', 0x4000, 0x0) ioctl$RNDADDTOENTCNT(r1, 0x40045201, &(0x7f0000000100)=0x10001) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r1, 0xc058534b, &(0x7f0000000140)={0x1ff, 0x400, 0x7, 0x6, 0x8fa}) [ 265.266482][T11854] IPVS: ftp: loaded support on port[0] = 21 14:05:20 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") mkdir(&(0x7f0000000040)='./control\x00', 0x0) open$dir(&(0x7f0000000000)='./control\x00', 0x103000, 0x1) open(&(0x7f0000000140)='./control\x00', 0xc40beb2474df922a, 0xfffffffffffffffd) 14:05:20 executing program 1: r0 = socket$kcm(0x11, 0x20000000002, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0x14, &(0x7f0000000040), 0x118) sendmmsg(r0, &(0x7f0000005f00)=[{{&(0x7f0000000080)=@caif=@dgm={0x25, 0x6}, 0x80, 0x0}}], 0x1, 0x0) 14:05:20 executing program 1: r0 = socket$inet6(0xa, 0x4, 0x88) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) bind$inet6(r0, &(0x7f0000009400)={0xa, 0x10000000004e20}, 0x1c) recvmsg(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140), 0x44}, 0x0) syz_emit_ethernet(0x83, &(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x0) 14:05:21 executing program 1: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x10502, 0x0) ioctl$TIOCLINUX4(r0, 0x541c, &(0x7f0000000040)) r1 = syz_open_dev$usb(&(0x7f0000000200)='/dev/bus/usb/00#/00#\x00', 0x40000fffffd, 0x200000000000042) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0xc0105500, 0x0) 14:05:21 executing program 1: r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x100000000, 0xba4c412cfe354065) ioctl$KVM_SET_VAPIC_ADDR(r0, 0x4008ae93, &(0x7f0000000080)=0x100000) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r2 = gettid() capset(&(0x7f0000000100)={0x20080522, r2}, &(0x7f0000000140)) 14:05:21 executing program 1: r0 = pkey_alloc(0x0, 0x3) pkey_mprotect(&(0x7f0000088000/0x1000)=nil, 0x1000, 0x8, r0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000040)=ANY=[@ANYRES32=0x0, @ANYBLOB="040005000500ffff090004009075"], &(0x7f0000000080)=0x12) removexattr(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)=@known='system.posix_acl_default\x00') setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f00000000c0)={r3, 0x5}, 0x8) openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000100)=@assoc_value, &(0x7f0000000140)=0x8) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2) write$UHID_CREATE2(r2, &(0x7f0000000580)=ANY=[@ANYBLOB="0b00000073797a310000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000009a00ff0705000000020000000000000065250000bb7592b4f29204101721c274f25b71ac9fba8a703e4e27af312ffd54ec6062e5bc33666da74f58135f0562a19d53accd4f430c67e9768860d0520009c091a4cf7978d138275adc3424273305936107293c1c051153a69d07c8a638a1c63429ce27698309b6797ced6cdfced9537d502e14412b4c52810ff0c38e0f1eeb90bf151330bb3dc3ff7fcb175afd105d71f887391814671f8e60060000c450f9fb57ec04133f22cca59bfd2d9d4e57fa148b52d559e0a2710f2bd2ead8ece8dbd943c71874771aef3f8a49e9283e0827df119df82532f5f19fb4689e2b4971211941301a54da964bb821cdcde14d39b1bc587bfdafc07ce3fcfade0309aa3f675d7e688863ef3a6b42f0fbcb7d863890f2658ad95eb00be809432e62d58d0d8d2d4920f40b3c4081983b2f90f85d6274c74f1319511742f2d6fd1f4ebfe4"], 0x1b2) rseq(&(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x4, 0xffffffff00000000, 0x49, 0xfff}, 0x1}, 0x20, 0x0, 0x0) 14:05:21 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x40000, 0x8) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000080)={0x0, 0x6, 0x100, 0x80000001, 0x0, 0x7}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0xfffffe0000000002) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000001340)=ANY=[@ANYRES16=r1, @ANYPTR, @ANYPTR64=&(0x7f00000012c0)=ANY=[@ANYPTR=&(0x7f0000000180)=ANY=[@ANYRESDEC=r3, @ANYRES32=r2, @ANYBLOB="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", @ANYPTR64, @ANYRES32=r2, @ANYRES32=r2, @ANYRES64=r2], @ANYPTR64=&(0x7f00000011c0)=ANY=[@ANYRES64=r3, @ANYBLOB="ae223d91288e1e471615820a8e8de34606d91cb3d456bd81c62d509e419766d77a85213de48fb89c79f90aeccaf1e6b030ad00c53848dd3a344423763ca65dc97c491064e2f8e9c908422a263ae2b77ec45a3128a79eaa2fca497980b9912d369346e0e39ad2ec69c1bef19da49a9c0b8ae14027bcd7ff29", @ANYRESHEX=0x0, @ANYRES64=r2, @ANYRESHEX=0x0, @ANYPTR, @ANYRES64=r3, @ANYPTR64, @ANYRES64=r1]], @ANYRESHEX=r2, @ANYRESOCT, @ANYRES32]) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x181000, 0x0) 14:05:21 executing program 0: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000440)='/dev/snapshot\x00', 0x408000, 0x0) r1 = syz_open_dev$radio(&(0x7f0000000480)='/dev/radio#\x00', 0x1, 0x2) r2 = syz_open_dev$vcsn(&(0x7f00000004c0)='/dev/vcs#\x00', 0x8, 0x20000) ioctl$KVM_IRQFD(r0, 0x4020ae76, &(0x7f0000000500)={r1, 0x81, 0x1, r2}) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x9, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") r4 = accept(r3, &(0x7f0000000040)=@nl=@proc, &(0x7f0000000180)=0x80) sendto$inet6(r4, &(0x7f00000001c0)="73509ee02977cf9ea3d9ece07409d43406b438cef4caff2e570ad3e3d1a02aa99b33f542dc2f25f3782c263f2de362598c434e3b25f304d2fc", 0x39, 0x40000, &(0x7f0000000200)={0xa, 0x4e21, 0x8, @empty, 0x7}, 0x1c) write$FUSE_NOTIFY_STORE(r2, &(0x7f0000000580)={0x2c, 0x4, 0x0, {0x2, 0x7014, 0x4, 0x0, [0x0, 0x0, 0x0, 0x0]}}, 0x2c) getsockopt$EBT_SO_GET_INIT_ENTRIES(r3, 0x0, 0x83, &(0x7f0000000380)={'nat\x00', 0x0, 0x4, 0xd1, [], 0x2, &(0x7f0000000240)=[{}, {}], &(0x7f0000000280)=""/209}, &(0x7f0000000400)=0x78) unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) syz_open_dev$vbi(&(0x7f0000000540)='/dev/vbi#\x00', 0x0, 0x2) accept$inet6(r4, 0x0, 0x0) openat$selinux_attr(0xffffffffffffff9c, &(0x7f00000005c0)='/proc/self/attr/exec\x00', 0x2, 0x0) ioctl$KVM_ASSIGN_PCI_DEVICE(r1, 0x8040ae69, &(0x7f0000000600)={0x4, 0x10001, 0x80000001, 0x6, 0x10000}) r5 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_INFO(r5, 0x0, 0x40, &(0x7f00000000c0)={'raw\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\xa6^_\x00\x00\x00\x00\x00\xbbN\xec\xff\xcb\xe3\xd2(\x00'}, &(0x7f0000000140)=0x54) [ 266.654144][T11897] IPVS: ftp: loaded support on port[0] = 21 14:05:21 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) prctl$PR_CAPBSET_READ(0x17, 0x8) listen(r0, 0x7) r1 = socket$netlink(0x10, 0x3, 0x200000000000004) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000100)="480000001400190d09004beafd0d8c560a8447000bffe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000ffffff", 0x48}], 0x1) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x1, 0x0) setsockopt$inet_dccp_int(r2, 0x21, 0x5, &(0x7f0000000080)=0x7, 0x4) 14:05:21 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000100)=0x1, 0x4) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000400)={@in={{0x2, 0x0, @empty}}, 0x0, 0x4, 0x0, "0a3f5398a8b66ee170ad160d9341bf768a749a9ccd388eae1128fd6df3aa85a05ca0a75dd2b485183c08094952fcd5104f23c8f05bc61780bfc5ed6379f61ab6fb1cfed2526b503676106ea16ff563a8"}, 0xd8) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='vcan0\x00', 0x10) sendto$inet(r0, &(0x7f0000000380)="19", 0x1, 0x0, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000240)="d5", 0x1, 0x420ffe0, 0x0, 0x0) sendfile(r0, r0, &(0x7f0000000040), 0x4) [ 267.021235][T11910] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 14:05:22 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05604, &(0x7f0000000080)={0x1, @pix_mp}) r1 = creat(&(0x7f0000000000)='./file0\x00', 0xeca11336e0cb3337) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x8c090804b136c590, 0x0, 0x6002, 0x2000, &(0x7f0000ffb000/0x2000)=nil}) 14:05:22 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/qat_adf_ctl\x00', 0x80, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") write$P9_RSETATTR(r0, &(0x7f0000000080)={0x7, 0x1b, 0x1}, 0x7) clock_gettime(0xfffffffffffffff8, &(0x7f0000002940)) 14:05:22 executing program 1: r0 = inotify_init1(0x80800) inotify_add_watch(r0, &(0x7f0000000280)='.\x00', 0xa4) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x3) close(r1) execve(&(0x7f0000000180)='./file1\x00', 0x0, 0x0) 14:05:22 executing program 0: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000440)='/dev/snapshot\x00', 0x408000, 0x0) r1 = syz_open_dev$radio(&(0x7f0000000480)='/dev/radio#\x00', 0x1, 0x2) r2 = syz_open_dev$vcsn(&(0x7f00000004c0)='/dev/vcs#\x00', 0x8, 0x20000) ioctl$KVM_IRQFD(r0, 0x4020ae76, &(0x7f0000000500)={r1, 0x81, 0x1, r2}) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x9, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") r4 = accept(r3, &(0x7f0000000040)=@nl=@proc, &(0x7f0000000180)=0x80) sendto$inet6(r4, &(0x7f00000001c0)="73509ee02977cf9ea3d9ece07409d43406b438cef4caff2e570ad3e3d1a02aa99b33f542dc2f25f3782c263f2de362598c434e3b25f304d2fc", 0x39, 0x40000, &(0x7f0000000200)={0xa, 0x4e21, 0x8, @empty, 0x7}, 0x1c) write$FUSE_NOTIFY_STORE(r2, &(0x7f0000000580)={0x2c, 0x4, 0x0, {0x2, 0x7014, 0x4, 0x0, [0x0, 0x0, 0x0, 0x0]}}, 0x2c) getsockopt$EBT_SO_GET_INIT_ENTRIES(r3, 0x0, 0x83, &(0x7f0000000380)={'nat\x00', 0x0, 0x4, 0xd1, [], 0x2, &(0x7f0000000240)=[{}, {}], &(0x7f0000000280)=""/209}, &(0x7f0000000400)=0x78) unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) syz_open_dev$vbi(&(0x7f0000000540)='/dev/vbi#\x00', 0x0, 0x2) accept$inet6(r4, 0x0, 0x0) openat$selinux_attr(0xffffffffffffff9c, &(0x7f00000005c0)='/proc/self/attr/exec\x00', 0x2, 0x0) ioctl$KVM_ASSIGN_PCI_DEVICE(r1, 0x8040ae69, &(0x7f0000000600)={0x4, 0x10001, 0x80000001, 0x6, 0x10000}) r5 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_INFO(r5, 0x0, 0x40, &(0x7f00000000c0)={'raw\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\xa6^_\x00\x00\x00\x00\x00\xbbN\xec\xff\xcb\xe3\xd2(\x00'}, &(0x7f0000000140)=0x54) 14:05:22 executing program 1: r0 = socket$inet6_sctp(0xa, 0xcb47e09aa8ed09c8, 0x84) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x7b, &(0x7f0000000080), 0x14) [ 267.682493][T11928] IPVS: ftp: loaded support on port[0] = 21 14:05:22 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r1, 0x400455c8, 0x1) recvmsg(r0, &(0x7f0000000080)={&(0x7f0000000100)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000240)=""/225, 0xe1}, {&(0x7f0000000340)=""/152, 0x98}], 0x2}, 0x10000) [ 268.145530][ T733] Bluetooth: Error in BCSP hdr checksum 14:05:23 executing program 2: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x20000, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(r0, 0x119, 0x1, &(0x7f0000000040)=0x8, 0x4) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(r0, 0xc0a85322, &(0x7f0000000080)) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f0000000140)={0x3, 0x2, {0x1, 0x3, 0x8, 0x1, 0x6}}) symlinkat(&(0x7f00000001c0)='./file0\x00', r0, &(0x7f0000000200)='./file0\x00') setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000240)={0x41, 0x1, 0x3}, 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000002c0)={r0, 0x11, 0x1, 0x6, &(0x7f0000000280)=[0x0], 0x1}, 0x20) renameat2(r0, &(0x7f0000000300)='./file0\x00', r0, &(0x7f0000000340)='./file0\x00', 0x1) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000380)={0x80, @time={0x77359400}, 0x7f, {0x115, 0x10001}, 0x3, 0x1, 0x4}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, &(0x7f0000000400)) r1 = fcntl$getown(r0, 0x9) fcntl$setownex(r0, 0xf, &(0x7f0000000480)={0x1, r1}) r2 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000500)='SEG6\x00') sendmsg$SEG6_CMD_SET_TUNSRC(r0, &(0x7f0000000640)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000600)={&(0x7f0000000540)={0x84, r2, 0x20, 0x70bd25, 0x25dfdbff, {}, [@SEG6_ATTR_ALGID={0x8, 0x6, 0xb48f}, @SEG6_ATTR_SECRET={0x14, 0x4, [0x3, 0xfffffffffffffffd, 0x3, 0x4]}, @SEG6_ATTR_SECRETLEN={0x8}, @SEG6_ATTR_SECRETLEN={0x8, 0x5, 0x11e}, @SEG6_ATTR_SECRET={0x18, 0x4, [0x0, 0x1, 0x1, 0x8, 0x9]}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x6}, @SEG6_ATTR_DST={0x14, 0x1, @ipv4={[], [], @multicast2}}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x6}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0xbebb}]}, 0x84}, 0x1, 0x0, 0x0, 0x8800}, 0x1) ioctl$VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000680)={0xe1, 0x51424752, 0x3, @stepwise={0x80, 0x10001, 0x9, 0x81, 0x0, 0x2}}) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, &(0x7f00000006c0), &(0x7f0000000700)=0xc) r3 = syz_open_dev$vbi(&(0x7f0000000740)='/dev/vbi#\x00', 0x1, 0x2) write$binfmt_elf32(r0, &(0x7f0000000780)={{0x7f, 0x45, 0x4c, 0x46, 0x4, 0x493, 0x0, 0x3ff, 0x0, 0x3, 0x3e, 0x1, 0x241, 0x38, 0x11a, 0x9, 0x0, 0x20, 0x2, 0x8, 0x9, 0x7fff}, [{0x2, 0x1, 0x5, 0x101, 0x8000, 0xa7, 0x3, 0x4}, {0x6474e551, 0x6, 0x81, 0x1, 0x0, 0x7, 0x5, 0x81}], "ca59474068d621dc0c664f222969b9196a39cff7be0cb64b9ee2b689c2dc0cb05f84bf48587608fd17559bd0f4f09d926aa3f7c0da79533029bd0ab043aa20477ebb79dcfb2d910e8a53fa492af53d88467697ef0f13fd86734d8262fb453c1f632df8d2ed07c1b51fdc23af67c6a39eb74e2deb335eaf2c8aaa08445bb52109d660a7ad3a51875b610a39718e8ede2d6be810a08e7e5e7d0ae54f234d4971aab7d77739be9af09e532307df139dc8ba498d4adcc487b578dac2ed0687ccb53a6e835036b0", [[], [], []]}, 0x43d) pipe(&(0x7f0000000bc0)={0xffffffffffffffff, 0xffffffffffffffff}) mount(&(0x7f0000000c00)=@sr0='/dev/sr0\x00', &(0x7f0000000c40)='./file0\x00', &(0x7f0000000c80)='nilfs2\x00', 0x82, &(0x7f0000000cc0)='proc\x00') ioctl$KVM_GET_EMULATED_CPUID(r4, 0xc008ae09, &(0x7f0000000d00)=""/251) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r4, 0x40405514, &(0x7f0000000e00)={0x3, 0x4, 0x7f, 0x8, '\x00', 0x3}) getsockopt$IP_VS_SO_GET_INFO(r0, 0x0, 0x481, &(0x7f0000000e40), &(0x7f0000000e80)=0xc) getsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000ec0)={{{@in6=@remote, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in6=@remote}}, &(0x7f0000000fc0)=0xe8) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000001000)=@assoc_value={0x0}, &(0x7f0000001040)=0x8) setsockopt$inet_sctp6_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f0000001080)={r7, 0x8, 0x0, 0x2}, 0x10) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000001100)='IPVS\x00') sendmsg$IPVS_CMD_SET_CONFIG(r4, &(0x7f0000001300)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x8020}, 0xc, &(0x7f00000012c0)={&(0x7f0000001140)={0x148, r8, 0x4, 0x70bd2c, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, [@IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x24, 0x21}}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x8, 0x1}}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}]}, @IPVS_CMD_ATTR_DAEMON={0x54, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @ipv4={[], [], @empty}}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bpq0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}]}, @IPVS_CMD_ATTR_DAEMON={0x6c, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x3}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'rose0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @initdev={0xac, 0x1e, 0x0, 0x0}}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e23}]}, @IPVS_CMD_ATTR_DAEMON={0x18, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @local}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xb2}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0x2}, @IPVS_DEST_ATTR_TUN_PORT={0x8, 0xe, 0x400}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e23}]}]}, 0x148}, 0x1, 0x0, 0x0, 0x5}, 0x10) setsockopt$packet_drop_memb(r5, 0x107, 0x2, &(0x7f0000001340)={r6, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xc5312d86948c5b3f}}, 0x10) syz_open_dev$evdev(&(0x7f0000001380)='/dev/input/event#\x00', 0x4, 0x40000) [ 268.405237][ T733] Bluetooth: Error in BCSP hdr checksum 14:05:23 executing program 0: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000440)='/dev/snapshot\x00', 0x408000, 0x0) r1 = syz_open_dev$radio(&(0x7f0000000480)='/dev/radio#\x00', 0x1, 0x2) r2 = syz_open_dev$vcsn(&(0x7f00000004c0)='/dev/vcs#\x00', 0x8, 0x20000) ioctl$KVM_IRQFD(r0, 0x4020ae76, &(0x7f0000000500)={r1, 0x81, 0x1, r2}) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x9, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") r4 = accept(r3, &(0x7f0000000040)=@nl=@proc, &(0x7f0000000180)=0x80) sendto$inet6(r4, &(0x7f00000001c0)="73509ee02977cf9ea3d9ece07409d43406b438cef4caff2e570ad3e3d1a02aa99b33f542dc2f25f3782c263f2de362598c434e3b25f304d2fc", 0x39, 0x40000, &(0x7f0000000200)={0xa, 0x4e21, 0x8, @empty, 0x7}, 0x1c) write$FUSE_NOTIFY_STORE(r2, &(0x7f0000000580)={0x2c, 0x4, 0x0, {0x2, 0x7014, 0x4, 0x0, [0x0, 0x0, 0x0, 0x0]}}, 0x2c) getsockopt$EBT_SO_GET_INIT_ENTRIES(r3, 0x0, 0x83, &(0x7f0000000380)={'nat\x00', 0x0, 0x4, 0xd1, [], 0x2, &(0x7f0000000240)=[{}, {}], &(0x7f0000000280)=""/209}, &(0x7f0000000400)=0x78) unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) syz_open_dev$vbi(&(0x7f0000000540)='/dev/vbi#\x00', 0x0, 0x2) accept$inet6(r4, 0x0, 0x0) openat$selinux_attr(0xffffffffffffff9c, &(0x7f00000005c0)='/proc/self/attr/exec\x00', 0x2, 0x0) ioctl$KVM_ASSIGN_PCI_DEVICE(r1, 0x8040ae69, &(0x7f0000000600)={0x4, 0x10001, 0x80000001, 0x6, 0x10000}) getsockopt$IPT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x40, &(0x7f00000000c0)={'raw\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\xa6^_\x00\x00\x00\x00\x00\xbbN\xec\xff\xcb\xe3\xd2(\x00'}, &(0x7f0000000140)=0x54) [ 268.619912][T11941] IPVS: ftp: loaded support on port[0] = 21 [ 268.799923][T11942] IPVS: ftp: loaded support on port[0] = 21 [ 269.046344][T11942] chnl_net:caif_netlink_parms(): no params data found [ 269.186133][T11942] bridge0: port 1(bridge_slave_0) entered blocking state [ 269.193446][T11942] bridge0: port 1(bridge_slave_0) entered disabled state [ 269.202402][T11942] device bridge_slave_0 entered promiscuous mode [ 269.246404][T11942] bridge0: port 2(bridge_slave_1) entered blocking state [ 269.253749][T11942] bridge0: port 2(bridge_slave_1) entered disabled state [ 269.262758][T11942] device bridge_slave_1 entered promiscuous mode [ 269.429768][T11942] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 269.454547][T11942] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 269.507712][T11942] team0: Port device team_slave_0 added [ 269.527666][T11942] team0: Port device team_slave_1 added 14:05:24 executing program 0: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000440)='/dev/snapshot\x00', 0x408000, 0x0) r1 = syz_open_dev$radio(&(0x7f0000000480)='/dev/radio#\x00', 0x1, 0x2) r2 = syz_open_dev$vcsn(&(0x7f00000004c0)='/dev/vcs#\x00', 0x8, 0x20000) ioctl$KVM_IRQFD(r0, 0x4020ae76, &(0x7f0000000500)={r1, 0x81, 0x1, r2}) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x9, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") r4 = accept(r3, &(0x7f0000000040)=@nl=@proc, &(0x7f0000000180)=0x80) sendto$inet6(r4, &(0x7f00000001c0)="73509ee02977cf9ea3d9ece07409d43406b438cef4caff2e570ad3e3d1a02aa99b33f542dc2f25f3782c263f2de362598c434e3b25f304d2fc", 0x39, 0x40000, &(0x7f0000000200)={0xa, 0x4e21, 0x8, @empty, 0x7}, 0x1c) write$FUSE_NOTIFY_STORE(r2, &(0x7f0000000580)={0x2c, 0x4, 0x0, {0x2, 0x7014, 0x4, 0x0, [0x0, 0x0, 0x0, 0x0]}}, 0x2c) getsockopt$EBT_SO_GET_INIT_ENTRIES(r3, 0x0, 0x83, &(0x7f0000000380)={'nat\x00', 0x0, 0x4, 0xd1, [], 0x2, &(0x7f0000000240)=[{}, {}], &(0x7f0000000280)=""/209}, &(0x7f0000000400)=0x78) unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) syz_open_dev$vbi(&(0x7f0000000540)='/dev/vbi#\x00', 0x0, 0x2) accept$inet6(r4, 0x0, 0x0) openat$selinux_attr(0xffffffffffffff9c, &(0x7f00000005c0)='/proc/self/attr/exec\x00', 0x2, 0x0) ioctl$KVM_ASSIGN_PCI_DEVICE(r1, 0x8040ae69, &(0x7f0000000600)={0x4, 0x10001, 0x80000001, 0x6, 0x10000}) getsockopt$IPT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x40, &(0x7f00000000c0)={'raw\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\xa6^_\x00\x00\x00\x00\x00\xbbN\xec\xff\xcb\xe3\xd2(\x00'}, &(0x7f0000000140)=0x54) [ 269.640096][T11942] device hsr_slave_0 entered promiscuous mode [ 269.680132][T11947] IPVS: ftp: loaded support on port[0] = 21 [ 269.697008][T11942] device hsr_slave_1 entered promiscuous mode [ 269.745528][T11942] debugfs: Directory 'hsr0' with parent '/' already present! [ 269.802369][T11942] bridge0: port 2(bridge_slave_1) entered blocking state [ 269.809697][T11942] bridge0: port 2(bridge_slave_1) entered forwarding state [ 269.817564][T11942] bridge0: port 1(bridge_slave_0) entered blocking state [ 269.824838][T11942] bridge0: port 1(bridge_slave_0) entered forwarding state [ 269.934573][ T5] Bluetooth: hci0: command 0x1003 tx timeout [ 269.941243][T11937] Bluetooth: hci0: sending frame failed (-49) [ 270.012274][T11942] 8021q: adding VLAN 0 to HW filter on device bond0 [ 270.027531][T11807] bridge0: port 1(bridge_slave_0) entered disabled state [ 270.047247][T11807] bridge0: port 2(bridge_slave_1) entered disabled state [ 270.071068][T11807] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 270.116138][T11756] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 270.125236][T11756] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 270.150631][T11942] 8021q: adding VLAN 0 to HW filter on device team0 [ 270.181262][T11756] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 270.191376][T11756] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 270.201602][T11756] bridge0: port 1(bridge_slave_0) entered blocking state [ 270.209192][T11756] bridge0: port 1(bridge_slave_0) entered forwarding state [ 270.263726][T11942] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 270.274807][T11942] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 270.290729][T11756] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 270.301106][T11756] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 270.310321][T11756] bridge0: port 2(bridge_slave_1) entered blocking state [ 270.317597][T11756] bridge0: port 2(bridge_slave_1) entered forwarding state [ 270.326524][T11756] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 270.336884][T11756] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 270.347882][T11756] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 270.358992][T11756] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 270.368986][T11756] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 270.379039][T11756] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 270.388819][T11756] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 270.398300][T11756] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 270.408246][T11756] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 270.417778][T11756] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 270.433827][T11756] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 270.443214][T11756] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 270.490833][T11942] 8021q: adding VLAN 0 to HW filter on device batadv0 14:05:25 executing program 2: process_vm_writev(0x0, &(0x7f0000000e80)=[{&(0x7f0000000980)=""/10, 0xa}, {&(0x7f0000000bc0)=""/231, 0xe7}, {&(0x7f0000000b00)=""/20, 0x14}, {&(0x7f0000000cc0)=""/163, 0xa3}, {&(0x7f0000000dc0)=""/163, 0xa3}], 0x5, &(0x7f0000000000)=[{&(0x7f0000000f00)=""/125, 0x7d}], 0x1, 0x0) r0 = socket(0x10, 0x803, 0x0) process_vm_writev(0x0, 0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000740)=""/25, 0x19}, {&(0x7f0000002240)=""/167, 0xa7}, {&(0x7f0000000880)=""/8, 0x8}], 0x3, 0x0) process_vm_writev(0x0, 0x0, 0x4a2c0ed817b69004, &(0x7f0000000780)=[{&(0x7f0000000a00)=""/224, 0xe0}], 0x136, 0x0) io_pgetevents(0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000700), 0x8}) getresuid(&(0x7f0000000180)=0x0, &(0x7f00000001c0), &(0x7f0000000900)) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000001fc0)={{{@in6=@mcast2, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in6=@local}}, &(0x7f0000000940)=0xe8) stat(&(0x7f00000009c0)='./file0\x00', &(0x7f00000020c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f0000000d80), &(0x7f0000000f80), &(0x7f0000002140)=0x0) r5 = getegid() r6 = getegid() fsetxattr$system_posix_acl(r0, &(0x7f0000000140)='system.posix_acl_access\x00', &(0x7f0000002180)={{}, {0x1, 0x2}, [{0x2, 0x7, r1}, {0x2, 0xf4b4de5605aebbaa, r2}], {0x4, 0x1}, [{0x8, 0x4, r3}, {0x8, 0x0, r4}, {0x8, 0x2, r5}, {0x8, 0x3b54ba0395f186e, r6}], {0x10, 0x5}, {0x20, 0x2}}, 0x54, 0x1) process_vm_writev(0x0, &(0x7f0000000b80)=[{&(0x7f00000007c0)=""/186, 0xba}], 0x1, 0x0, 0x0, 0x0) sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) ptrace$getregset(0x4204, 0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000280)=""/153, 0x99}) fcntl$setstatus(r0, 0x4, 0x40400) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f00000000c0)=""/85, 0xb}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/120, 0x6c}, {&(0x7f0000000480)=""/60, 0x3dd}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f0000000540)=""/154, 0x40d}, {&(0x7f0000000340)=""/22, 0x16}], 0x161, &(0x7f0000000600)=""/191, 0xbf}}], 0x40000000000020a, 0x0, &(0x7f0000003700)={0x77359400}) 14:05:25 executing program 0: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000440)='/dev/snapshot\x00', 0x408000, 0x0) r1 = syz_open_dev$radio(&(0x7f0000000480)='/dev/radio#\x00', 0x1, 0x2) r2 = syz_open_dev$vcsn(&(0x7f00000004c0)='/dev/vcs#\x00', 0x8, 0x20000) ioctl$KVM_IRQFD(r0, 0x4020ae76, &(0x7f0000000500)={r1, 0x81, 0x1, r2}) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x9, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") r4 = accept(r3, &(0x7f0000000040)=@nl=@proc, &(0x7f0000000180)=0x80) sendto$inet6(r4, &(0x7f00000001c0)="73509ee02977cf9ea3d9ece07409d43406b438cef4caff2e570ad3e3d1a02aa99b33f542dc2f25f3782c263f2de362598c434e3b25f304d2fc", 0x39, 0x40000, &(0x7f0000000200)={0xa, 0x4e21, 0x8, @empty, 0x7}, 0x1c) write$FUSE_NOTIFY_STORE(r2, &(0x7f0000000580)={0x2c, 0x4, 0x0, {0x2, 0x7014, 0x4, 0x0, [0x0, 0x0, 0x0, 0x0]}}, 0x2c) getsockopt$EBT_SO_GET_INIT_ENTRIES(r3, 0x0, 0x83, &(0x7f0000000380)={'nat\x00', 0x0, 0x4, 0xd1, [], 0x2, &(0x7f0000000240)=[{}, {}], &(0x7f0000000280)=""/209}, &(0x7f0000000400)=0x78) unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) syz_open_dev$vbi(&(0x7f0000000540)='/dev/vbi#\x00', 0x0, 0x2) accept$inet6(r4, 0x0, 0x0) openat$selinux_attr(0xffffffffffffff9c, &(0x7f00000005c0)='/proc/self/attr/exec\x00', 0x2, 0x0) ioctl$KVM_ASSIGN_PCI_DEVICE(r1, 0x8040ae69, &(0x7f0000000600)={0x4, 0x10001, 0x80000001, 0x6, 0x10000}) getsockopt$IPT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x40, &(0x7f00000000c0)={'raw\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\xa6^_\x00\x00\x00\x00\x00\xbbN\xec\xff\xcb\xe3\xd2(\x00'}, &(0x7f0000000140)=0x54) 14:05:25 executing program 2: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer\x00', 0x80, 0x0) writev(r0, &(0x7f0000001640)=[{0x0}, {&(0x7f0000000380)="7eb27ef9", 0x4}], 0x2) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f0000000000)={0x3, 0x7, 0x4, 0x0, 0x0, [{r0, 0x0, 0x1}, {r0, 0x0, 0x9}, {r0, 0x0, 0x5}, {r0, 0x0, 0x9}]}) [ 270.910066][T11961] IPVS: ftp: loaded support on port[0] = 21 14:05:26 executing program 2: r0 = open(&(0x7f0000000040)='./file0\x00', 0x143041, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000000)={0x101, 0x683d5104, 0x3, 0x4, 0x5, 0x7fff}) pwrite64(r0, 0x0, 0xffffffffffffff3a, 0x0) 14:05:26 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3400000013000100"/20, @ANYRES32, @ANYBLOB="000000030000000004001e00100001000c0007000000040000d60676202513b2d543bd54"], 0x34}}, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) fsetxattr$trusted_overlay_opaque(r0, &(0x7f0000000040)='trusted.overlay.opaque\x00', &(0x7f0000000080)='y\x00', 0x2, 0x1) [ 271.393490][T11973] netlink: 'syz-executor.2': attribute type 30 has an invalid length. 14:05:26 executing program 0: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000440)='/dev/snapshot\x00', 0x408000, 0x0) r1 = syz_open_dev$radio(&(0x7f0000000480)='/dev/radio#\x00', 0x1, 0x2) r2 = syz_open_dev$vcsn(&(0x7f00000004c0)='/dev/vcs#\x00', 0x8, 0x20000) ioctl$KVM_IRQFD(r0, 0x4020ae76, &(0x7f0000000500)={r1, 0x81, 0x1, r2}) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x9, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") r4 = accept(r3, &(0x7f0000000040)=@nl=@proc, &(0x7f0000000180)=0x80) sendto$inet6(r4, &(0x7f00000001c0)="73509ee02977cf9ea3d9ece07409d43406b438cef4caff2e570ad3e3d1a02aa99b33f542dc2f25f3782c263f2de362598c434e3b25f304d2fc", 0x39, 0x40000, &(0x7f0000000200)={0xa, 0x4e21, 0x8, @empty, 0x7}, 0x1c) write$FUSE_NOTIFY_STORE(r2, &(0x7f0000000580)={0x2c, 0x4, 0x0, {0x2, 0x7014, 0x4, 0x0, [0x0, 0x0, 0x0, 0x0]}}, 0x2c) getsockopt$EBT_SO_GET_INIT_ENTRIES(r3, 0x0, 0x83, &(0x7f0000000380)={'nat\x00', 0x0, 0x4, 0xd1, [], 0x2, &(0x7f0000000240)=[{}, {}], &(0x7f0000000280)=""/209}, &(0x7f0000000400)=0x78) unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) syz_open_dev$vbi(&(0x7f0000000540)='/dev/vbi#\x00', 0x0, 0x2) accept$inet6(r4, 0x0, 0x0) openat$selinux_attr(0xffffffffffffff9c, &(0x7f00000005c0)='/proc/self/attr/exec\x00', 0x2, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_INFO(r5, 0x0, 0x40, &(0x7f00000000c0)={'raw\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\xa6^_\x00\x00\x00\x00\x00\xbbN\xec\xff\xcb\xe3\xd2(\x00'}, &(0x7f0000000140)=0x54) [ 271.878043][T11978] IPVS: ftp: loaded support on port[0] = 21 [ 271.997067][T11974] netlink: 'syz-executor.2': attribute type 30 has an invalid length. [ 272.014847][T11756] Bluetooth: hci0: command 0x1001 tx timeout [ 272.021366][T11937] Bluetooth: hci0: sending frame failed (-49) 14:05:27 executing program 2: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x1, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000600)={r0, 0xc0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=0x8001, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x9, 0x5}, 0x0, 0x0, &(0x7f0000000480)={0x2, 0x0, 0x5, 0x5}, &(0x7f00000004c0)=0x7ccf, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=0x80000000}}, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000640)=r1, 0x4) accept4$packet(r0, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000400)=0xffffffffffffff40, 0x80800) setsockopt$RDS_GET_MR_FOR_DEST(r0, 0x114, 0x7, &(0x7f0000000200)={@ll={0x11, 0x11, r2, 0x1, 0x1}, {&(0x7f0000000140)=""/99, 0x63}, &(0x7f00000001c0), 0x3b}, 0xa0) r3 = socket$tipc(0x1e, 0x2, 0x0) bpf$OBJ_PIN_PROG(0x6, &(0x7f00000002c0)={&(0x7f00000000c0)='./file0\x00', r0}, 0xfffffffffffffff4) setrlimit(0x1, &(0x7f0000a9cff8)) setrlimit(0x9, &(0x7f0000000000)={0xffffffff, 0x9}) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x48100, 0x0) ioctl$PPPIOCDISCONN(r4, 0x7439) r5 = accept4(r3, 0x0, 0x0, 0x0) setsockopt$RDS_GET_MR(r5, 0x114, 0x2, &(0x7f00000003c0)={{&(0x7f0000000340)=""/58, 0x3a}, &(0x7f0000000380), 0x4b}, 0x20) 14:05:27 executing program 2: r0 = mq_open(&(0x7f0000000100)='system_u:object_r:default_context_t:s0\x00', 0x40, 0x10, &(0x7f0000000140)={0x0, 0x9, 0xe0, 0x1, 0xfffffffffffffff8, 0x0, 0x1f, 0x7f}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="b400000000d1b835960000006600000000000000730137000000000095000000000000009b3c526b67023786c64a772828c88ff0714dfb9f8dd19a922fb3cf455bff1b59f2b71da2db8378ba2aae0000617574d5893231204672a43531d6d1afbe29ae9554125eb85e0700000000000000ab1ebaca9f74ed8d98f762c82fcff0478376b4144e47a29f3f94f980ec27f8557e24474fc171a8966851fbee72966a32282323f366471463c598ee30d21bd137f467efc6d0fe4aac6a999d8d251e25791f3fe9a9287b56e5f3f0fc3762aafb817f4561dc8a5abc701a1892e2c2393f4f899d27b56f293aa3047cc5b1feaf3fca56608b7209574ade1544ceabd59fc107a3d7fedf394712cf84313cbc38d8a8506ac7521ab315b19c72c366455a0353203bb729afc67e20801a0ee2ea71577c54c8fad86700"/323], &(0x7f0000003ff6)='G\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x21e, 0x10, &(0x7f00000002c0), 0xfffffffffffffd02}, 0x48) ioctl$HIDIOCGFLAG(r0, 0x8004480e, &(0x7f00000000c0)) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/vga_arbiter\x00', 0x402, 0x0) getpeername$tipc(r1, &(0x7f0000000d80), &(0x7f0000000dc0)=0x10) fsetxattr$security_selinux(r0, &(0x7f0000000080)='security.selinux\x00', &(0x7f0000000180)='system_u:object_r:default_context_t:s0\x00', 0x27, 0x2) [ 274.094996][ T12] Bluetooth: hci0: command 0x1009 tx timeout [ 278.177543][T11933] ================================================================== [ 278.185801][T11933] BUG: KMSAN: uninit-value in kfree_skb+0x23c/0x4c0 [ 278.192409][T11933] CPU: 0 PID: 11933 Comm: syz-executor.1 Not tainted 5.3.0-rc6+ #18 [ 278.200402][T11933] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 278.210627][T11933] Call Trace: [ 278.214013][T11933] dump_stack+0x191/0x1f0 [ 278.218430][T11933] kmsan_report+0x162/0x2d0 [ 278.222946][T11933] __msan_warning+0x75/0xe0 [ 278.227763][T11933] kfree_skb+0x23c/0x4c0 [ 278.232011][T11933] ? kmsan_get_shadow_origin_ptr+0x28c/0x3a0 [ 278.238186][T11933] bcsp_close+0x127/0x1e0 [ 278.242700][T11933] ? bcsp_open+0x5d0/0x5d0 [ 278.247121][T11933] hci_uart_tty_close+0x385/0x410 [ 278.252247][T11933] ? hci_uart_tty_open+0x5a0/0x5a0 [ 278.257442][T11933] tty_ldisc_release+0x5dd/0xdb0 [ 278.262449][T11933] tty_release_struct+0x4f/0x1d0 [ 278.267571][T11933] ? tty_unlock+0x82/0x100 [ 278.272375][T11933] tty_release+0x1be2/0x1e80 [ 278.277434][T11933] ? tty_release_struct+0x1d0/0x1d0 [ 278.282785][T11933] __fput+0x4c9/0xba0 [ 278.286830][T11933] ____fput+0x37/0x40 [ 278.291007][T11933] ? fput_many+0x2a0/0x2a0 [ 278.295538][T11933] task_work_run+0x22e/0x2a0 [ 278.300299][T11933] prepare_exit_to_usermode+0x39d/0x4d0 [ 278.305959][T11933] syscall_return_slowpath+0x90/0x610 [ 278.311366][T11933] do_syscall_64+0xe2/0xf0 [ 278.316157][T11933] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 278.322148][T11933] RIP: 0033:0x413561 [ 278.326058][T11933] Code: 75 14 b8 03 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 04 1b 00 00 c3 48 83 ec 08 e8 0a fc ff ff 48 89 04 24 b8 03 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 53 fc ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 278.346122][T11933] RSP: 002b:0000000000a6fbf0 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 278.354544][T11933] RAX: 0000000000000000 RBX: 0000000000000006 RCX: 0000000000413561 [ 278.362934][T11933] RDX: 0000000000000000 RSI: 00000000000018b9 RDI: 0000000000000005 [ 278.371351][T11933] RBP: 0000000000000001 R08: 00000000f4cbd8bc R09: ffffffffffffffff [ 278.379669][T11933] R10: 0000000000a6fcd0 R11: 0000000000000293 R12: 000000000075c9a0 [ 278.387645][T11933] R13: 000000000075c9a0 R14: 0000000000760508 R15: ffffffffffffffff [ 278.395808][T11933] [ 278.398129][T11933] Uninit was created at: [ 278.402391][T11933] kmsan_internal_poison_shadow+0x53/0xa0 [ 278.408115][T11933] kmsan_slab_free+0x8d/0x100 [ 278.412881][T11933] kmem_cache_free+0x2d1/0x2b70 [ 278.417824][T11933] kfree_skb+0x473/0x4c0 [ 278.422156][T11933] ip6_mc_input+0xec9/0x1470 [ 278.426745][T11933] ipv6_rcv+0x683/0x710 [ 278.431109][T11933] process_backlog+0x721/0x1410 [ 278.435986][T11933] net_rx_action+0x74b/0x1950 [ 278.440664][T11933] __do_softirq+0x4a1/0x83a [ 278.445209][T11933] irq_exit+0x230/0x280 [ 278.449381][T11933] exiting_irq+0xe/0x10 [ 278.453536][T11933] smp_apic_timer_interrupt+0x48/0x70 [ 278.459114][T11933] apic_timer_interrupt+0x2e/0x40 [ 278.464139][T11933] default_idle+0x53/0x90 [ 278.468533][T11933] arch_cpu_idle+0x25/0x30 [ 278.473095][T11933] do_idle+0x1d7/0x790 [ 278.477164][T11933] cpu_startup_entry+0x45/0x50 [ 278.481932][T11933] start_secondary+0x370/0x470 [ 278.486787][T11933] secondary_startup_64+0xa4/0xb0 [ 278.492345][T11933] ================================================================== [ 278.500488][T11933] Disabling lock debugging due to kernel taint [ 278.506766][T11933] Kernel panic - not syncing: panic_on_warn set ... [ 278.513368][T11933] CPU: 0 PID: 11933 Comm: syz-executor.1 Tainted: G B 5.3.0-rc6+ #18 [ 278.522757][T11933] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 278.533001][T11933] Call Trace: [ 278.536304][T11933] dump_stack+0x191/0x1f0 [ 278.540717][T11933] panic+0x3c9/0xc1e [ 278.544680][T11933] kmsan_report+0x2ca/0x2d0 [ 278.549303][T11933] __msan_warning+0x75/0xe0 [ 278.553809][T11933] kfree_skb+0x23c/0x4c0 [ 278.558319][T11933] ? kmsan_get_shadow_origin_ptr+0x28c/0x3a0 [ 278.564529][T11933] bcsp_close+0x127/0x1e0 [ 278.568876][T11933] ? bcsp_open+0x5d0/0x5d0 [ 278.573418][T11933] hci_uart_tty_close+0x385/0x410 [ 278.578828][T11933] ? hci_uart_tty_open+0x5a0/0x5a0 [ 278.583943][T11933] tty_ldisc_release+0x5dd/0xdb0 [ 278.588908][T11933] tty_release_struct+0x4f/0x1d0 [ 278.593849][T11933] ? tty_unlock+0x82/0x100 [ 278.598281][T11933] tty_release+0x1be2/0x1e80 [ 278.602903][T11933] ? tty_release_struct+0x1d0/0x1d0 [ 278.608108][T11933] __fput+0x4c9/0xba0 [ 278.612111][T11933] ____fput+0x37/0x40 [ 278.616103][T11933] ? fput_many+0x2a0/0x2a0 [ 278.620528][T11933] task_work_run+0x22e/0x2a0 [ 278.625219][T11933] prepare_exit_to_usermode+0x39d/0x4d0 [ 278.631001][T11933] syscall_return_slowpath+0x90/0x610 [ 278.636494][T11933] do_syscall_64+0xe2/0xf0 [ 278.641022][T11933] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 278.646922][T11933] RIP: 0033:0x413561 [ 278.650820][T11933] Code: 75 14 b8 03 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 04 1b 00 00 c3 48 83 ec 08 e8 0a fc ff ff 48 89 04 24 b8 03 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 53 fc ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 278.671475][T11933] RSP: 002b:0000000000a6fbf0 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 278.680006][T11933] RAX: 0000000000000000 RBX: 0000000000000006 RCX: 0000000000413561 [ 278.688244][T11933] RDX: 0000000000000000 RSI: 00000000000018b9 RDI: 0000000000000005 [ 278.696495][T11933] RBP: 0000000000000001 R08: 00000000f4cbd8bc R09: ffffffffffffffff [ 278.704727][T11933] R10: 0000000000a6fcd0 R11: 0000000000000293 R12: 000000000075c9a0 [ 278.712824][T11933] R13: 000000000075c9a0 R14: 0000000000760508 R15: ffffffffffffffff [ 278.722565][T11933] Kernel Offset: disabled [ 278.726901][T11933] Rebooting in 86400 seconds..